mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-10-06 22:22:08 +03:00
MHSanaei
d57dcf824b
Bump vite, oxlint/oxfmt, msw, jsdom and plugin-react in the frontend, and fumadocs, lucide-react, oxlint/oxfmt, postcss and pnpm in docs. npm audit reported seroval <=1.6.2 (critical) via solid-js, which the react-query devtools pull in pinned to ~1.5.4, and sprintf-js (no patched release) via remarkable's argparse@1. `npm audit fix --force` "fixed" both by downgrading swagger-ui-react to 3.23.3, which brings in far worse advisories. Instead override seroval/seroval-plugins to ^1.6.8 and give remarkable argparse@2; remarkable only requires argparse from its unused CLI entry, so the bundled library is unaffected. pnpm appends an exact-version minimumReleaseAgeExclude entry on every update of a too-fresh release and never prunes them. Drop the stale ones; keep only fumadocs 16.16.2 and oxlint/oxfmt, still inside the 1-day cutoff.
53 lines
2.0 KiB
YAML
53 lines
2.0 KiB
YAML
allowBuilds:
|
|
esbuild: true
|
|
sharp: true
|
|
unrs-resolver: true
|
|
# Force any vulnerable transitive postcss (pulled in by next) up to a patched
|
|
# release — fixes GHSA-qx2v-qp2m-jg93 / CVE-2026-41305 (vulnerable < 8.5.10).
|
|
overrides:
|
|
'postcss@<8.5.10': '^8.5.15'
|
|
'sharp@<0.35.0': '^0.35.3'
|
|
minimumReleaseAgeExclude:
|
|
- fumadocs-core@16.16.2
|
|
- fumadocs-ui@16.16.2
|
|
- '@oxfmt/binding-android-arm-eabi@0.72.0'
|
|
- '@oxfmt/binding-android-arm64@0.72.0'
|
|
- '@oxfmt/binding-darwin-arm64@0.72.0'
|
|
- '@oxfmt/binding-darwin-x64@0.72.0'
|
|
- '@oxfmt/binding-freebsd-x64@0.72.0'
|
|
- '@oxfmt/binding-linux-arm-gnueabihf@0.72.0'
|
|
- '@oxfmt/binding-linux-arm-musleabihf@0.72.0'
|
|
- '@oxfmt/binding-linux-arm64-gnu@0.72.0'
|
|
- '@oxfmt/binding-linux-arm64-musl@0.72.0'
|
|
- '@oxfmt/binding-linux-ppc64-gnu@0.72.0'
|
|
- '@oxfmt/binding-linux-riscv64-gnu@0.72.0'
|
|
- '@oxfmt/binding-linux-riscv64-musl@0.72.0'
|
|
- '@oxfmt/binding-linux-s390x-gnu@0.72.0'
|
|
- '@oxfmt/binding-linux-x64-gnu@0.72.0'
|
|
- '@oxfmt/binding-linux-x64-musl@0.72.0'
|
|
- '@oxfmt/binding-openharmony-arm64@0.72.0'
|
|
- '@oxfmt/binding-win32-arm64-msvc@0.72.0'
|
|
- '@oxfmt/binding-win32-ia32-msvc@0.72.0'
|
|
- '@oxfmt/binding-win32-x64-msvc@0.72.0'
|
|
- '@oxlint/binding-android-arm-eabi@1.87.0'
|
|
- '@oxlint/binding-android-arm64@1.87.0'
|
|
- '@oxlint/binding-darwin-arm64@1.87.0'
|
|
- '@oxlint/binding-darwin-x64@1.87.0'
|
|
- '@oxlint/binding-freebsd-x64@1.87.0'
|
|
- '@oxlint/binding-linux-arm-gnueabihf@1.87.0'
|
|
- '@oxlint/binding-linux-arm-musleabihf@1.87.0'
|
|
- '@oxlint/binding-linux-arm64-gnu@1.87.0'
|
|
- '@oxlint/binding-linux-arm64-musl@1.87.0'
|
|
- '@oxlint/binding-linux-ppc64-gnu@1.87.0'
|
|
- '@oxlint/binding-linux-riscv64-gnu@1.87.0'
|
|
- '@oxlint/binding-linux-riscv64-musl@1.87.0'
|
|
- '@oxlint/binding-linux-s390x-gnu@1.87.0'
|
|
- '@oxlint/binding-linux-x64-gnu@1.87.0'
|
|
- '@oxlint/binding-linux-x64-musl@1.87.0'
|
|
- '@oxlint/binding-openharmony-arm64@1.87.0'
|
|
- '@oxlint/binding-win32-arm64-msvc@1.87.0'
|
|
- '@oxlint/binding-win32-ia32-msvc@1.87.0'
|
|
- '@oxlint/binding-win32-x64-msvc@1.87.0'
|
|
- oxfmt@0.72.0
|
|
- oxlint@1.87.0
|